Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: FtnmS+C9P+QmtMz8PNDflFeSV6dhe7rYOO7xnYyX14U=
Subject key identifier: B1:04:3F:E0:AF:DD:33:CC:78:01:AF:34:62:D7:52:EF:9E:C4:45:E2
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 01984DE6B35C7554549F28C982F0D0189CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 22:00:21 +0000
Manifest this update: Sun 27 Jul 2025 22:00:21 +0000
Manifest next update: Mon 28 Jul 2025 22:00:21 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: pLPIv/Qcdtvduntory8p/PYoYMrfd9uWiW7bL748YfY=)
2: o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa (hash: A2h09hDnc623pPAi/KarvXmKS91Xx49mtAM/lILxzFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:b3:5c:75:54:54:9f:28:c9:82:f0:d0:18:9c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Jul 27 22:00:21 2025 GMT
Not After : Jul 28 22:00:21 2025 GMT
Subject: CN=b1043fe0afdd33cc7801af3462d752ef9ec445e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:53:f6:d3:91:42:72:b4:59:86:a0:03:46:
da:37:9c:ea:5d:f3:69:4c:3d:b1:41:3f:65:20:c9:
4f:e5:8a:e6:59:27:91:7b:b6:98:07:2e:c3:45:12:
e2:76:a0:79:47:f7:91:ad:cf:9f:9a:ad:2c:0a:38:
40:9a:c0:17:44:61:7a:8b:46:96:b1:71:a0:3a:36:
5c:1a:00:8d:4d:db:7c:40:82:4e:97:3c:83:ac:e8:
12:5f:c3:db:5c:5f:06:70:69:52:6c:1c:e8:38:7a:
52:76:95:4c:b1:c4:5a:44:a9:e0:f9:05:3b:96:2b:
af:2b:38:ee:a2:9a:47:33:76:f8:cf:b5:91:dd:a0:
c0:ba:b5:5f:a2:f9:ca:44:b1:fa:8a:c9:aa:7e:81:
1c:c2:b6:11:7b:ca:e9:6d:91:f6:b3:c0:69:a0:e2:
8f:d1:04:66:73:be:12:9f:c0:b6:1f:23:76:06:b6:
82:e5:dd:9f:a3:1c:57:a4:19:0c:e0:db:6b:20:d5:
ea:94:da:95:5b:81:61:f4:1b:1e:70:4e:16:84:74:
0d:f9:82:33:63:d1:82:91:ea:04:15:55:37:0d:26:
12:63:e7:c9:a3:48:17:8f:69:44:b0:28:da:a0:23:
84:95:11:74:53:1b:cf:26:8b:bf:3e:ec:88:e5:8c:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:3F:E0:AF:DD:33:CC:78:01:AF:34:62:D7:52:EF:9E:C4:45:E2
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:43:b5:3e:63:ea:61:b8:c8:aa:c4:61:4d:cd:99:e8:b9:40:
9e:07:d1:3a:11:3c:84:c3:18:87:0a:3f:9e:7c:4b:92:d0:84:
91:16:75:36:29:81:a5:ba:3a:09:3d:8d:09:c4:fa:04:42:1e:
d8:b1:e0:34:b1:44:99:36:78:9a:6b:68:0f:df:5c:8c:8c:02:
bf:18:e0:aa:00:09:08:f9:d9:ac:bf:f7:1c:36:1c:bd:7b:c5:
d0:e3:87:e5:b9:0b:92:de:5a:c0:07:2d:3a:18:b9:f7:1a:98:
5d:e6:e6:d8:97:e7:26:6f:72:7a:0f:01:dd:72:4c:5c:52:b5:
50:bd:00:8d:f6:d1:3e:ee:67:cb:66:ee:97:95:a1:84:00:7d:
cb:cf:e6:06:3d:18:c4:1c:a9:eb:33:89:04:46:21:70:2b:7b:
ef:73:69:51:88:c3:a3:c3:55:b2:52:6b:33:bd:8b:15:63:b8:
6f:b3:c5:14:c2:b7:bf:27:40:19:d2:62:2d:a1:9a:5b:fd:8f:
56:be:66:10:b7:61:9c:67:c1:5b:5d:63:ba:0c:af:27:d4:3c:
c8:b8:30:a3:b2:7e:a0:30:29:3c:9e:34:68:8a:89:7b:9a:4a:
73:1b:52:1a:d6:2c:d1:48:97:ea:f5:69:d8:83:06:39:37:1e:
27:35:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:08:55 2025 by rpki-client